Description
pgAdmin存在远程代码执行漏洞，这是未充分验证发送至validate_binary_path路径的utility_path参数导致的。
pgAdmin validate_binary_path 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.anquanke.com/post/id/313757
https://cloud.tencent.com/developer/article/2623496
https://www.ctfiot.com/171992.html
https://avd.aliyun.com/product?prod=pgadmin4
https://www.venustech.com.cn/new_type/aqtg/20240408/27272.html
https://www.cnblogs.com/hetianlab/p/18241887
https://www.fortiguard.com/encyclopedia/ips/52490
https://www.vicarius.io/vsociety/posts/remote-code-execution-vulnerability-in-pgadmin-cve-2024-3116
https://ayoubmokhtar.com/post/remote_code_execution_pgadmin_8.4-cve-2024-3116/
https://frycos.github.io/vulns4free/2022/12/02/rce-in-20-minutes.html
https://www.snort.org/rule_docs/1-66428
https://www.sentinelone.com/vulnerability-database/cve-2024-3116/
https://sploitus.com/exploit?id=PACKETSTORM:180464
https://dep-downloads.ngfw.forcepoint.com/download/llm_dynup/LLM-Dynup-1721-Release-Note.html
https://s4e.io/tools/pgadmin-unauthenticated-rce-cve-2022-4223
https://thrive.trellix.com/s/article/000013183?language=en_US